NVD

Id
23720  
Name
CVE-2015-1375  
Description
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-28  
Modified Date
2015-01-28  
Seq
2015-1375  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126130 23720 CVE-2015-1375 http://packetstormsecurity.com/files/130017/WordPress-Pixarbay-Images-2.3-XSS-Bypass-Upload-Traversal.html  View
126131 23720 CVE-2015-1375 20150120 MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities  View
126132 23720 CVE-2015-1375 35846  View
126133 23720 CVE-2015-1375 [oss-security] 20150125 CVE request: MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities  View
126134 23720 CVE-2015-1375 20150119 MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities  View
126135 23720 CVE-2015-1375 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5939 JVNDB-2015-001259 WordPress 用 Pixabay Images プラグインの pixabay-images.php における任意のファイルに書き込まれる脆弱性 WordPress 用 Pixabay Images プラグインの pixabay-images.php は、アップロード機能へのアクセスを適切に制限しないため、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2015-1375 78600 CVE-2015-1375 23720 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001259.html 2015-01-14 2015-01-29 View